EIP-2026-108207

This exploit demonstrates a Local File Inclusion (LFI) vulnerability in the Joomla component com_appointment version 1.5. The vulnerability allows an attacker to read arbitrary files on the server by manipulating the 'controller' parameter in the URL.